Privacy Policy

Planivora is operated by Pyxage Ltd, the controller of personal data processed through this service.

Pyxage Ltd is registered in England and Wales under company number 11232293. Our registered address is 3 Daylesford, 494 Littlemoor Road, Weymouth, Dorset, DT3 5NY, United Kingdom. Contact us at contact@hq.pyxage.com.

We collect and process information needed to provide a private, adaptive planning service:

• Account data: your name, optional profile picture, email address, authentication records, session information, and account preferences.
• Subscription and support data: trial and access status, Stripe customer and subscription references, payment status, minimal usage milestones, support notes and administrative action records. Our ordinary owner console uses account details, aggregates and service-health information. For support, an authorised administrator can open your app in a time-limited impersonation session, view planning content and make product changes. These sessions require a reason and record the administrator, customer, time and actions. They do not grant access to payment-card details, passwords, credential management or account deletion.
• Calendar data: the Google account and calendars you connect, calendar settings, event details, availability, attendee and RSVP information, and the identifiers needed to synchronise changes. Private or confidential event content is minimised where the service can operate without it.
• Planning data: tasks, notes, priorities, deadlines, routines, working hours, planned sessions, proposals, approvals, time-tracking records, and scheduling history.
• AI explanation data: when you expressly request an AI explanation, Planivora sends a minimised description of the selected proposal, including relevant task titles, timing, constraints, and reasons. The app does not use AI to choose or apply your schedule.
• Optional marketing: when you save your email preference, we send your first name, last name, email address, and yes/no consent to HighLevel for Planivora by Pyxage emails. You can withdraw consent in Settings → Account or through the unsubscribe link in marketing emails.
• Notification data: browser push subscription endpoints, notification preferences, quiet hours, and delivery status.
• Technical and security data: IP address and request information available to our hosting and authentication providers, device or browser information, service logs, error records, and an activity trail of important account actions.

We receive connected-calendar data from Google only after you authorise the specific permissions shown by Google. You can use Planivora without enabling browser notifications, and AI explanations are optional.

• To create and secure your account, provide the planner, synchronise selected calendars, apply changes you approve, and send requested notifications — to perform our contract with you.
• To provide optional AI explanations after your confirmation — to perform the service you request.
• To maintain security, prevent abuse, diagnose faults, recover interrupted operations, and improve reliability — for our legitimate interests in operating a safe service.
• To keep consent and transaction records and respond to lawful requests — to meet legal obligations.
• For any optional use that requires consent — based on that consent, which you may withdraw.

Planivora’s core scheduling engine is deterministic. It can propose or, under rules you configure, automatically maintain calendar blocks. You remain in control of the rules and can review relevant activity. We do not make solely automated decisions that produce legal or similarly significant effects.

Planivora uses Google Calendar data to understand busy time, build a feasible plan, display calendars and events, create or update Planivora-managed blocks, and submit an RSVP only when you choose one. Planivora does not request access to Gmail, contacts, Google Meet administration, or team administration.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train general-purpose AI models.

You can disconnect Google Calendar in Settings or revoke Planivora in your Google Account. Disconnecting stops future synchronisation and erases the stored Google credential; it does not delete events already written to your Google Calendar.

We do not sell your personal data. We disclose only what is needed to providers acting for us, including:

• Google, for the Calendar connection and changes you request;
• HighLevel, for email-marketing consent and contact management when you save that preference;
• Stripe, for hosted checkout, subscriptions, tax calculation where configured, invoices and payment management; card details are handled by Stripe;
• Neon, for database infrastructure and authentication;
• Vercel, for application hosting and AI model routing;
• AI model providers, only when you request an AI explanation or Pilot assistance and subject to the selected provider’s processing terms; and
• browser push services operated by Apple, Google, Mozilla, or Microsoft, when you enable notifications.

We may also disclose information to professional advisers, authorities where legally required, or a successor in a business reorganisation subject to appropriate protections. Providers may change as the service evolves; we require them to protect data and process it only for authorised purposes.

Pilot is optional product assistance. After your confirmation, Vercel Eve manages your conversation and sends messages, relevant help documentation and account records through Vercel AI Gateway to the AI provider. Pilot can read your tasks and notes, saved calendar events and attendees, scheduling rules and hours, work and plan history, settings, consent and subscription status. Records are retrieved as needed and scoped to your account. Credentials, authentication tokens and internal administrator notes are excluded. Calendar information reflects the most recent sync.

We store questions, answers, conversation identifiers, consent version and usage/cost metadata in your account for history, support and abuse prevention. Authorised administrators can review Pilot questions and answers, linked to your user ID and timestamps, for these purposes. Our account records follow our retention, export and deletion rules. Eve also stores conversation state and retrieved context in its workflow runtime; that storage is subject to Vercel’s retention and deletion controls. Clearing the visible conversation does not delete server records. Do not submit passwords, credentials or information you do not want processed. Pilot cannot execute schedule or account changes.

We retain account and planning data while your account is active and only as long as reasonably necessary to provide and secure the service. Operational logs and backups may remain for limited periods before rotation or secure deletion. Legal, fraud-prevention, or dispute records may be kept longer where required.

You can export your Planivora data or request account deletion in Settings. Account deletion removes your Planivora product data and stored Google credential; internal support notes and profile identifiers are removed from the customer directory. Minimal billing references and pseudonymous administrative records may remain for reconciliation, fraud prevention, disputes or legal obligations. A minimal deletion receipt is retained for up to 30 days to confirm completion and retry a failed erasure. Residual copies in backups are isolated from ordinary use and expire under the applicable backup schedule.

We use safeguards appropriate to the service, including encrypted transport, access controls, account-scoped database queries, encrypted Google refresh tokens, bounded permissions, security logging, and reauthentication for sensitive actions. No internet service is completely secure, so we cannot guarantee absolute security.

Protect your sign-in credentials and tell us promptly if you believe your account has been compromised.

Pyxage is established in the United Kingdom, and our providers may process data in the UK, European Economic Area, United States, or other countries. Where required, we rely on adequacy regulations, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful safeguard.

Depending on where you live, you may have rights to access, correct, erase, restrict, or receive a portable copy of your personal data; object to certain processing; withdraw consent; and complain to a supervisory authority. These rights can be limited by law.

To exercise a right, email contact@hq.pyxage.com. We may verify your identity before acting. UK users may complain to the Information Commissioner’s Office; EU users may contact their local data protection authority.

Planivora uses strictly necessary cookies for authentication, security, session continuity and your UK/US English preference. It also uses browser storage and service-worker caches for install preferences, offline operation, and limited account-bound snapshots. Signing out or changing users clears private device snapshots; you can also clear site data in your browser.

Planivora is not directed to children under 16, and we do not knowingly collect their personal data. Contact us if you believe a child has provided data to the service.

We may update this policy as Planivora, our providers, or legal requirements change. We will post the revised version here and, where a change materially affects your rights, provide an appropriate notice.

Privacy questions and requests can be sent to contact@hq.pyxage.com or Pyxage Ltd, 3 Daylesford, 494 Littlemoor Road, Weymouth, Dorset, DT3 5NY, United Kingdom.